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In their seminal paper, Einstein, Podolsky and Rosen (EPR) show that an observer who is maxi- 
mally entangled with the system to be measured can perfectly predict the outcome of two incompat- 
ible measurements. This feat stands in stark contrast to Heisenberg's uncertainty principle which 
tell us that if the observer is not entangled with the system at all, then his ability to predict the 
outcomes of incompatible measurements such as position and momentum is extremely limited. The 
observations made by EPR and Heisenberg illustrate two extreme cases of the interplay between 
entanglement and uncertainty. On the one hand, no entanglement means that measurements will 
be maximally uncertain. Yet on the other hand, maximal entanglement means that there is no 
more uncertainty at all. Here we show that this apparent rift can be reconciled in that it is indeed 
possible to have an exact relation - an equality - between the amount of uncertainty and the amount 
of entanglement. 



Heisenberg's uncertainty principle forms one of the fundamental elements of quantum mechanics. Originally proven 
for measurements of position and momentum, it is one of the most striking examples of the difference between a 
quantum and a classical world [11. Uncertainty relations today are probably best known in the form given by 
Robertson [5], who extended Heisenberg's result to two arbitrary observables X and Z. More precisely, Robertson's 
relation states that when measuring the state \ip) using either X or Z, then 

&XAZ>~M[X,Z\\il>)\, (!) 

where AY = \/ (ip\Y 2 \i>) — (ip\Y\^) 2 for Y £ {X,Z} is the standard deviation resulting from measuring with 
observable Y. 

In the modern day literature, uncertainty is usually measured in terms of entropies 0H] (see [5] for a survey). One 
of the reasons this is desirable is that ([I]) makes no statement if \ip) happens to give zero expectation on [X. Z] [4J. 
To see how uncertainty can be quantified in terms of entropies, let us start with a simple example. Throughout, we 
let Alice (A) denote the system to be measured. For now, let us consider measuring a single qubit in the state pa 
using two incompatible measurements given by the Pauli a x or a z eigenbases. We have from [H] that for any pa 

H(K\e) = \ [H(K\Q = a x ) + H(K\0 = a z )] > i , (2) 

where H(K\Q = 6) = — *}2 k Pk\Q=e^0ZPk\Q=e is the Shannon entropy 1 of the probability distribution over measure- 
ment outcomes k £ {0,1} when we perform the measurement labeled 9 on the state pa, and each measurement is 
chosen with probability pe = 1/2. To see that this is an uncertainty relation note that if one of the two entropies 
is zero, then ^ tells us that the other is necessarily non-zero, i.e., there is at least some amount of uncertainty. 
If we measure a d^-dimensional system A in two orthonormal bases 9q = {\xo)}t=i an d #i = {| x i)}x=i then the 
r.h.s. of ^ becomes log(l/c), where c = max Xo , Xl |(x |xi)| 2 [§J. The largest amount of uncertainty, i.e., the largest 
log(l/c), is thereby obtained when |(xo|xi)| = 1/^/Wa, that is, the two bases are mutually unbiased (MUB) [7]. 

When thinking about uncertainty, it is often illustrative to adopt the perspective of an "uncertainty game" [5J [3] , 
commonly used in quantum cryptography jlOj . In particular, we will think about uncertainty from the perspective of 
an observer called Bob holding a second system (B) whose task is to guess the outcome of the measurement on Alice's 
system successfully. Bob thereby knows ahead of time what measurements could be made and the probability that a 
particular measurement setting is chosen. To help him win the game, Bob may even prepare pa himself, and Alice 
tells him which measurement she performed before he has to make his guess. The amount of uncertainty as measured 
by entropies can be understood as a limit on how well Bob can guess Alice's measurement outcome - the more difficult 
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it is for Bob to guess the more uncertain Alice's measurement outcomes are. If Bob is not entangled with A but only 
keeps classical information about the state, such as for example a description of the density operator pA, then ^ still 
holds even if we condition on Bob's classical information B [TTJ[T2]- More precisely, we have .ff ( A" 1 0-B c iassicai ) ^ 1/2 
for any states or distribution of states that Bob may prepare. 

Uncertainty and entanglement 

Another central element of quantum mechanics is the possibility of entanglement, and examples suggest that there 
is a strong interplay between entanglement and uncertainty. In particular, Einstein, Poldolsky and Rosen [9! observed, 
that if Bob is maximally entangled with A then his uncertainty can be reduced dramatically. To see this imagine that 
Pab = 1$) ($| where |$) = ( 1 00) + |ll))/\/2 is the maximally entangled state between A and B. Since |<I>) is maximally 
correlated in both the o~ x and o~ z eigenbases, Bob can simply measure his half of the EPR pair in the same basis as 
Alice to predict her measurement outcome perfectly, winning the guessing game described above. This is precisely 
the effect observed in [5] and shows that the uncertainty relations of ([lj and ^ are clearly inadequate to capture 
the interplay between entanglement and uncertainty. Fortunately, it is possible to extend the notion of uncertainty 
relations to take the possibility of entanglement into account [5] H2] . Such relations are known as uncertainty relations 
with quantum side information (here B). More precisely, it was shown [8] that if we measure A in two bases labeled 
6*o, ft then 

H{K\BQ) = 1 [H(K\BG = ft) + H(K\BQ = ft)] > log(l/c) + H(A\B) , (3) 

where H(A\B) is the conditional von Neumann entropy of A given B. If A and B are entangled, then H(A\B) can 
be negative. Indeed, H{A\B) = — logfti when pab is the maximally entangled state, in which case the lower bound 
in (J3| becomes trivial. The uncertainty relation of ^ thus allows for the possibility that the uncertainty could be 
reduced in the presence of entanglement. It also provides us with a first clue to the relation between entanglement 
and uncertainty in one direction, namely that little uncertainty (i.e., H(K\BQ) is small) implies that H(A\B) must 
be negative and hence pab is entangled |13| . As such, Q is useful for the task of entanglement witnessing [5] 1141 115) . 

Similar relations have since been proven for more than two measurements on Alice's system, and in terms of 
other forms of entropies |16H19j . One entropy measure that is of central importance in cryptography is the so-called 
conditional min-entropy H m - m , and it yields a more immediate link between uncertainty relations with quantum side 
information and the uncertainty game mentioned above. Specifically, it was shown |16j that if we measure A in one 
of dA + 1 possible mutually unbiased bases chosen uniformly at random then 2 

H min (K\BQ) > \ogd A + mm{0,H min (A\B)} . (4) 

If K is a classical, then the conditional min-entropy H m i n (K\BQ) = — log Pg UCSS (K\BQ) is simply derived from 
the maximum probability that Bob can guess K, averaged over the choice of basis 9 20 . That is, it captures 
exactly how well Bob can guess Alice's measurement outcome K by performing a measurement on B. If A is 
quantum, then H m i n (A\B) also enjoys a beautiful operational interpretation as H m i n (A\B) = — \og[dAF(A\B)] where 

F{A\B) := max AB ^ A , F (Qaa'Aa® &b^a> (Pab)), F is the fidelity, and \$> A A>) = (1/V3a) Ej=i \5)a\3)a> is the 
maximally entangled state between A and A' [20]. In other words, H m { n (A\B) measures how close one can bring 
Pab to a maximally entangled state by performing an arbitrary operation on the B system. Recall from the example 
above that Bob can win the uncertainty game perfectly if pab really is maximally entangled. Intuitively, the quantity 
H m i n (A\B) thus measures how far away Bob is from this favourable scenario. Needless to say one could write down 
similar statements for Renyi entropies other than the min-entropy, but these are in fact equivalent up to small error 
terms (see Appendix for details). 

Do these relations resolve the riddle on how uncertainty relates to entanglement? Note that the uncertainty 
relation Q again provides us with a relation between entanglement and uncertainty in one direction. In particular, 
it tells us that if it is easy for Bob to guess Alice's measurement outcome (7J m ; n (A|_B9) is small), then there really 
exists some map Kb^a' that Bob can use to bring pab at least somewhat close to being maximally entangled with A. 
That is, it tells us that a reduction in uncertainty implies the presence of entanglement. However, it does not tell us 
that the presence of entanglement really does lead to a significant reduction in uncertainty. Of course, if pab is close 
to the maximally entangled state then uncertainty is reduced by at least some amount, because two states which are 
close yield similar statistics when measured. Yet we will see below that this alone is insufficient for our purpose. 



2 More precisely, smoothing of the entropies is required for |4l to hold I16| . 
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I. MAIN RESULT 



Here, we prove that there exists an exact relation between entanglement and uncertainty. More precisely, we prove 
the following equality if we measure A in one of d A + 1 possible mutually unbiased bases 

H 2 {K\BQ) =\og(d A + l) -log(2-^l B > + l) , (5) 

where H 2 (A\B) = — logTr [pab(1a <S> Pb) -1 ^ 2 Pab(^a ® Ps)" 1 ^ 2 ] is the conditional Renyi 2-entropy used in quantum 
cryptography [21], and K is the classical measurement outcome obtained by measuring A in the basis labeled = 9. 
For classical K, it has an operational interpretation as H2{K\BQ) = — log P^ CSS (K\BQ) given by the probability 
that Bob manages to guess Alice's measurement outcome K using the pretty good measurement [22, 23 (see below) 
after he learns which measurement was made. For the general case we prove that 

H 2 (A\B) = -log[d A F^(A\B)] with F™(A\B) := F($ AA ,, 1 A ® M§^ A ,{p AB )) , (6) 

where &aa' is the maximally entangled state and A pg is the pretty good recovery map [23]. 3 Both the pretty good 
measurement and the pretty good recovery map get very close to the performance of the optimal processes |22l I24j . 
We note that the conditional Renyi 2-entropy also appears in the study of randomness extractors (especially with 
quantum side information - privacy amplification) 21, 25, 26 , and in its quantum counterpart decoupling [26H28] . 
It is interesting to note that for the special case p A B = Pa ® Pb, ([5| becomes an equation relating unconditional 
entropies that was discussed in [2^1 ED]- In addition, we also obtain relation ^ for a variant H' 2 {A\B) ~ e H m [ n (A\B), 
where R2 £ means up to small error terms (see Appendix for details). 

Our relation ([5| establishes, for the first time, an equivalence between uncertainty H 2 (K\BQ) and our ability 
to recover entanglement as given by H 2 (A\B). It is deeply satisfying for us because it reconciles the apparently 
contradictory observations of EPR and Hciscnberg into a single equation, and demonstrates that both effects were 
flip sides of the same coin. 



II. DISCUSSION 
Operational examples 

To gain further intuition about (J5J), let us first return to the uncertainty game discussed earlier. In what follows 
we refer to H 2 (A\B) ^ as the Heisenberg regime and H 2 (A\B) < as the EPR regime. Note that in terms of the 
operational interpretations of H 2 , we can rewrite ^ as 

rSS-WBB) = ^Vl E P^mne = e) = dA • F 2 m x ] + 1 ■ (7) 



In the game, Bob prepares a state pab and sends the A system to Alice. She measures A in one basis chosen uniformly 
at random from the complete set of d,A + 1 MUBs, and announces the basis (the index 9) to Bob. Bob's task is to 
guess Alice's outcome using the pretty good measurement on B. Equation ^ says that Bob's ability to win or lose 
this game is quantitatively connected to the entanglement of pab, as measured by F pg (A\B). 

Let us consider a number of special cases that illustrate this concept. If pab is the maximally entangled state, 
we have F pg = 1 and Bob can guess Alice's measurement outcome perfectly regardless of which measurement she 
performs, i.e., P p & oss (K\B<d = 9) = 1 for all 9. That is, there is no uncertainty as expected. If Bob prepares pab with 
less than maximal entanglement, then F P6 (A\B) < 1 and there will be at least one basis for which Bob cannot perfectly 
guess the outcome. Thus, there is at least some amount of uncertainty expressed quantitatively as H 2 (K\BQ). 

If Pab is separable, then Bob is stuck in the Heisenberg regime (F ps ^ 1/oU) and his ability to guess is very poor, 
constrained by the uncertainty relation PW= CSS (K\BQ) ^ 2/(d A + 1). This illustrates that entanglement is necessary 
for Bob to gain an advantage in the guessing game. 



We denote by * ne normalized maximally entangled state, and hence a factor d A appears in ml 
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Uncertainty and certainty relations 



The curious reader may question why we must formulate our uncertainty equality ^ using d,A + 1 MUBs, can we 
not use fewer measurements? To answer this, it is instructive to study what kind of relations our main result §5§ 
implies. On the one hand, we can deduce regular uncertainty relations, and e.g. we get a relation in terms of the 
smooth conditional min-entropy similar to |16j , 



H e min (K\eB) > \og(d A + 1) - log 



-H min (A\l 



1 -l-21og(l/e) 



(8) 



where e > denotes a small error term (see Appendix for details). Here, the l.h.s. has the operation meaning of minus 
the logarithm of Bob's guessing probability (up to e), P guess (K\QB), when Alice measures in one of oIa + 1 possible 
MUBs chosen uniformly at random. But on the other hand, we also get relations that upper bound the uncertainties 
of incompatible observables. In the literature these are known as certainty relations [311 I32j . and here we give the 
first such relations that allow for quantum memory. E.g. we get in terms of the conditional min-entropy (again up to 
a small error term e > 0, see Appendix for details), 



H min (K\eB) sC \og(d A + 1) - log 



2-^min(^|S) 



+ l + 21og(l/e) 



(9) 



This says that Bob's certainty, i.e., his ability to guess Alice's measurement outcome, must be high if he is highly 
entangled to Alice as measured by the smooth conditional min-entropy. Like our main result, ([9]) implies that if Alice 
and Bob are maximally entangled, Bob has perfect certainty about Alice's outcomes regardless of which measurement 
she performs (up to e). 

Now there is a simple argument that considering fewer than oIa + 1 measurements implies that only trivial certainty 
relations can hold. As uncertainty equalities as in |5]) imply non-trivial certainty relations, such equalities cannot 
hold for a smaller number of measurements. This is in sharp contrast to uncertainty relations, where non-trivial 
relations can be obtained for just two measurements. To see this, consider the case where pa is just one qubit and we 
perform measurements in the ax and az eigenbases respectively. Let B be trivial, i.e., H min (K\QB) — H mul (K\Q). 
In this case, we are just considering the entropy of the outcome distribution of measuring pa in one of the two bases. 
Clearly, when pa is an eigenstate of ay, then the outcome distribution for both ax and az is uniform and hence 
H m i n (K\Q) = 1, which is the maximum value. The same argument shows that when measuring in less than oIa + 1 
mutually unbiased bases, -ff m i n (-ftT |0) = \ogd,A which is the maximum value that it can take and hence only the trivial 
upper bound/certainty relation holds. It is thus clear that equalities such as ^ can only hold for sets of measurements 
which are sufficiently rich. 



Bounds for less bases 



Even though there does not exist an uncertainty equality for measuring in less than <1a + 1 MUBs, we can still 
give lower and upper bounds for Bob's uncertainty about 1 ^ n ^ oIa MUBs on A in terms of the entanglement 
between A and B. Moreover these inequalities are tight for all n, that is, fixing the set of measurements and the 
entanglement to be constant, there exists states that achieve the upper and lower bounds. Our relations are again 
in terms of the conditional Renyi 2-entropy, and using P^ css {n) as a shorthand to denote Bob's guessing probability 
PP& css (K\B<d) when Alice does n measurements, we find that the following bounds are tight in the Heisenberg regime 
(FP*(A\B) < l/d A ), 

i^i^(n)^ d i-F^A\B ) + ^ A . (10) 

Moreover, the following bounds are tight in the EPR regime (F PS (A\B) > l/d^), 

n — 1 1 

F^(A\B) < P g P? css (n) F™(A\B) + - . (11) 

B n n 

Here, the upper bounds (lower bounds) can be thought of as uncertainty relations (certainty relations). It is remarkable 
that we can derive these tight uncertainty relations for all n directly from our main result (see Appendix for derivation) . 



Taken together, (10) and (111 completely characterize the allowable range of values that -Pg,fess( n ) can attain. As an 
example, consider = 5. Fig. [I] plots the tight upper and lower bounds as a function of F pg (A\B). Notice that 
the tight lower bound does not change as n varies from 1 to 5; it only increases when we include the sixth basis. In 
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FIG. 1: Upper (UB) and lower (LB) bounds on Pgu CSB (n) as a function of F pg (A\B) for cLa = 5, for various values of n. For 
n = 1, 2, 3, 4, 5, the lower bound is given by the solid black line. The upper bounds for these values of n are respectively the 
black, purple, blue, green, and orange dashed lines. For n = 6, the upper and lower bounds coincide, i.e., the allowed values 
are confined to live on the red dashed line. 



contrast, the tight upper bound steadily decreases with n, reflecting the complementarity between the different bases. 
Overall, as n increases from 1 to 6, the area of the allowed range monotonically shrinks towards zero, and the allowed 
area becomes zero for n = 6 since the two quantities -Pguossl") an d F P6 (A\B) are deterministically related by our 
main result. 

From Fig. [I] one can also see that if Bob can guess two MUBs on A well then he can also guess d A + 1 MUBs 
on A fairly well. Conceptually this follows from a two step chain of reasoning: if Bob's uncertainty is low for two 
MUBs, then he must be entangled to Alice, which in turn implies that he must have a low uncertainty for all bases. 
So entanglement provides the key link, from two MUBs to all bases. From the above results, it is straightforward to 
derive the following quantitative statement of this idea 



d A ■ (2PPS (2) - 1) +1 
PgS em (dA +l)> K S j; s ;; 1 , i 1 2.1 

which says that as P„ p u g css (2) 1, then P^ css {d A + 1) 1. 



Applications in quantum information theory 



We end this article with a discussion of the applications of our main result to quantum information processing tasks. 
Because entanglement is crucial for several quantum information technologies, the experimenter often needs a method 
to verify that their source is indeed producing entangled pairs, i.e., an "an entanglement witness". Following [8], our 
main result ([5]) offers a simple strategy for entanglement witnessing since it connects entanglement to uncertainty, 
which is experimentally measurable. In particular, Alice and Bob (in their distant labs, receiving A and B respectively) 
can sample from the source multiple times and communicate their results to gather statistics, say, regarding the Kg 
observable on A and the Lg observable on B. Suppose they do this for a set of n MUBs {Kg} e l =1 on A, with Bob 
measuring in a some arbitrary set of n bases {Lg}g =1 on B, and they estimate the joint probability distribution for 
each pair {Kg, Lg} and hence can evaluate the classical entropies Hi{Kg\Lg). Then according to our main result (see 
Appendix for details), their source is necessarily entangled if 

^ 2 - W8 |L e) > l+ n —l . (13) 
0=1 A 

Note that this method offers the flexibility of doing entanglement witnessing with 2 ^ n ^ d A + 1 observables. For 
n = 2, the same strategy based on the uncertainty relation ^ was discussed in [H] and implemented in [HI I15| . 
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Our uncertainty equality ^ also gives insights for studying the monogamy of correlations. The basic idea of 
monogamy is that A's entanglement with B limits the degree to which A can be entangled with a third system, 
E. There have been several statements of monogamy in the literature; however, a nice aspect of our results is the 
potential to state monogamy as an equation rather than an inequality. By invoking a slight extension of our main 
result, we can show that for any tripartite pure state pabe, 

D {p AE \\Y® Pe) =logd A -log((<k + l) .2- H '»W B V -l) , (14) 

where Dq denotes the relative Renyi 0-entropy, and H' 2 is a variant of the Renyi 2-entropy (see Appendix for details) . 
This relation states that Bob's uncertainty about a complete set of Alice's MUBs is a quantitative measure of the 



distance of pae (Alice's and Eve's state) to the completely uncorrelated state. According to (14 1, Bob and Eve fight 
in a "zero-sum game" to be correlated to Alice, i.e., any gain of knowledge about Alice's system by Bob forces Eve's 
state to get closer to being uncorrelated with Alice, and conversely any gain of distance from the uncorrelated state 
by Eve forces Bob to lose knowledge. 

We conclude by mentioning that the conditional Renyi 2-entropy is the relevant quantity in the study of classical 
and quantum randomness extractors against quantum side information. Randomness extractors are crucial objects 
in classical and quantum cryptography. Since our uncertainty equality |5]) connects the conditional Renyi 2-entropy 
of the pre-measurement state (the entanglement term) to the conditional Renyi 2-entropy of the post-measurement 
state (the uncertainty term), one expects that our main result ^ shines some light on the relation between classical 
and quantum extractors. And indeed, our results can be used to get a new perspective on the results in [IB], where 
security of the noisy storage model [33] was first linked to the quantum capacity. 

III. METHODS 
Quantifying entanglement 

An important entropy measure studied in cryptography is the conditional min-entropy. It was originally defined 
in an abstract form [21], but was later given an intuitive operational meaning 20 in terms of entanglement, i.e., 
H min (A\B) = -log[d A F(A\B)} with 

F{A\B)= max F ($ AA ,, (1 A ® A b ^a>)(pab)) , (15) 

where & A A' denotes the normalized maximally entangled state, the maximum is over all quantum operations Ab^a> 
with A' a copy of A, and F(p, a) = (Try^/pff^/p) denotes the fidelity. 

A related entropy measure is the conditional Renyi 2-entropy, which is defined for a bipartite quantum state pab 

as 

H 2 (A\B) = -logTr [p AB {t A ® Pb)~ 1/2 Pab{U ® Pb)~ 1/2 ] ■ (16) 

Here we give an operational meaning for the conditional Renyi 2-entropy showing that, like the min-entropy, it is a 
natural measure of the entanglement between A and B in that H2(A\B) = — \og[d A F pg (A\B)] with 

F**(A\B) = F(<&aa> , 14 ® Af_^, (pab)) , (17) 

and A B S . A , is the pretty good recovery map [23]. To see this, we note that the pretty good recovery map can be 
written as 

A3U A ,(-) = j- A -£U A > {pb 1/2 (-)pb 1/2 ) , (18) 

where £ B ^ A , denotes the adjoint of the Choi-Jamilkowski map of pab, 

£A^B(-)=d A -Tr A [((-) T ®1b)pab] ■ (19) 



Putting this in (16) we arrive at (17 1. The map A B 6 _^ A , is pretty good in the sense that it is close to optimal for 



recovering the maximally entangled state, i.e., the following bound holds [24] 

F 2 (A\B) < F ps {A\B) ^ F{A\B) . (20) 
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Quantifying uncertainty 

When measuring a bipartite quantum state pab on A in some basis K = {\k)}, we arrive at a so-called classical- 
quantum state 

PKB = ® t B ) PAB (\k){k\ ®t B )=Yl l fc X fc l ® ^ ' ( 21 ) 



The conditional min-entropy of pkb, using the formula for F{K\B) from (15), translates to H nl - m (K\B) = 
- log P suess (K\B) with HD] 

P gU e S8 (^|5) = max^Tr[^p|] , (22) 

the probability for guessing K correctly by performing the optimal measurement {E B } on the quantum side infor- 
mation B. The conditional min-entropy quantifies the uncertainty of K in the exact sense of the uncertainty game, 
namely it quantifies the probability that Bob wins the uncertainty game. 



The conditional Renyi 2-entropy of a classical-quantum state pkb (see ( 21 )) is again defined as in ( 16 ). Furthermore, 



it was shown in |23j that its operational form (171 is given by 



H 2 (K\B) = - logP™ as (K\B) , (23) 

where P^ CSS (K\B) denotes the probability of guessing K by performing the "pretty good measurement" [22]. For the 
classical-quantum state (21) the pretty good measurement operators are defined as 

^b=Pb 1/2 PbPb 1 ' 2 ■ (24) 



By calculating P^ CSS (K\B) — Ylk^ 1 [^bPb]> tne equivalence of (23) to the definition of the conditional Renyi 2 



entropy (16) can be seen. Hence, the conditional Renyi 2-entropy corresponds to the probability that Bob wins the 
uncertainty game by using the pretty good measurement. It is known that the pretty good measurement performs 
close to optimal, i.e., the following bound holds [22] 

P* UCSS (K\B) < Plf css (K\B) < P gucss (K\B) ■ (25) 

In the following we will not only measure in one fixed basis, but with equal probability in one of cIa + 1 MUBs. For 
that reason, we will work with the state 

Pkbb = -j — —r ■ EdWfcl ® 1*Wb(IW*I ® ^b) ® \e){9\ e , (26) 

A 8=1 fc=l 

where the elements of the <1a + 1 MUBs 9 are denoted by {]#&}}. It is straightforward to see that 

P|f.„Wse ) = ^ I . ? P«„ WS e = 9) . (27) 



Main result 

Here we prove our main result, the uncertainty equality ([5]). For this we define pab = (1a® p b X ^)pab{^-a® P b ^} 
and rewrite the fully quantum conditional Renyi 2-entropy as Ei2(A\B) = — logTr [p^g] . Similarly, we rewrite the 
classical-quantum conditional Renyi 2-entropy as 

H 2 (K\BQ) ^ - log I ^^-J^Ttb^t A [pAB{\O k )(e k \<S)t B fn . (28) 



Now we introduce the space Ha' b' — Hab as well as the state pA' b> — Pab ■ We have 
(d A + 1) • 2-WI Be > = ^Tr B {Tr A [{\9 k )(6 k \ ® l B )p AB ]Tr A {(\6 k )(d k \ ® 

= ^Tr BB ,TW[(IWfcl ® I I) (Pab 

<g> pa'B')Fbb'\ 

e,k 

= Tr BB ,Tr AA , [(I aa' + F A a')(pab ® PA'B>)F BB >} 

= Ttbb>Ttaa>[(pab <E> pa'B')F B b'\ + Tr BB 'Tr aa'[F A a'(pab ® pa>b')F bb >] 

= Tr B [Tr A (pAB)Tr A (pAB)] +J2 Tr BB>Tr A A>[(\t)(s\ ® |s)(i| ® W)G5ab <8 pa'bO^W] 

= 1 +^Tr B {Tr A [(|t)(s| ® l)p AB ]Tr A [(|s)<i| ® l)p AB ]} 

= l + Tr[pi B ] (29) 

where = |t)(s| (8> |s)(t| is the operator that swaps A and A' (similarly for F BB i). Here, the second line uses 
the "swap trick", for operators M and N, and swap operator F, 

Tr(MiV) = Tr[(M ® AT)F)] , (30) 

and the third line invokes that a full set of MUBs generates a complex projective 2-design [33], i.e., 

^ I Wfcl ® I^X^fel = ^A' + Faa' ■ (31) 

In the appendix, we show in detail that our result also holds for other measurements as long as they form a 2-design. 
We note that some other extensions of our main result can also be found in the Appendix. 
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Appendix A: Bounds for less bases 



Here, we derive the upper and lower bounds ( 10 1 and ( 11 ) on the uncertainty when Alice measures in 1 ^ n ^ d A -\-l 
MUBs. It is helpful to first state the following Lemma, which considers just a single basis K. 

Lemma 1. Let K = {\k}} be an orthonormal basis on some Hilbert space Ha- Then, we have for any bipartite 
quantum state pab that 



P^ eSS (K\B) > F**{A\B) 
Proof. For p KB = ^ k (\k)(k\ ® 1 B )pAB(\k}{k\ ® t B ) we have that 



(Al) 



P™{K\B) = Tr 



= Tr 



-1/2 -1/2 

PkbPb PkbPb 

-1/2 -1/2" 

PabPb PkbP b 



= dA-Tr [$ AA >(l A ® ^b\a')(pkb)] 
= F(<f> AA ,,d A ■ (2a®A b S ^A')(pkb)) 

> F(<& AA ,,(T A ®k P £^ AI )( PAB )) 

= F ps (A\B) . 



(A2) 



The inequality step in this proof invoked the property that the fidelity decreases upon decreasing one of its arguments, 
and hence the result follows from 

d A ■ (2a ® A b S ^A')(pkb) > (1a ® A%_+ a ,)(j>ab) • (A3) 

To show (A3), we denote the positive operator ctaa' = (!<£) ^b^a')(Pab), note that the measurement in K on the 
A-system commutes with I ® A B S _^ A , , and we have that 

d A ■ (1a ® K%a>)(Pkb) - (1a ® ^ b \a>)(pab) 

= d A ■ ^(|fc)(fc| ® l A >)<7AA>(\k)(k\ ® 1 A .) - 5^(|*X*I ® ^A>)0TAA'(\k')(k'\ ® t A ,) 
k k,k' 

= (d A - i)E(l*X*l ® i)^a'(I*X*I j^rj E d fc X*l ® t)cT A A'(\k')(k'\ ® i)] 



d A 

= (d A -l){F®T)(a AAI ) , 
where we set in the last line 

1 dA ~ 1 dA ~} 

H-) = T — l E z m (-)(z m )\ z=Y^ 

A m=l k=0 

Since J 7 is a CPTP map, the claim follows. 



k,k'^k 



oj = e 2 * i/dA 



(A4) 

(A5) 

□ 
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Equation (Al) states that the entanglement quantified by F PS (A\B) lower bounds the guessing probability 
P P % CSS (K\B). By combining ( Al I with our main result ([5|, we get that for 1 ^ n ^ d A + 1 many MUBs, 



d A +i 



Pil ss (K\BQ = 6) = (n 1) ■ F™(A\B) + 1 + Ud A + 1 - n) ■ F**(A\B) £ P g p u s css (^|Se = 9) 

8=1 \ 8=n+l ) 

s? (n - 1) • F PS (A\B) + 1 , (A6) 



and this proves (11). Similarly, we can invoke the immediate relation P P & CSS (K\B) ^ l/d A to get 



d A + l 



P™ m (K\BQ = 9) = d A - F**{A\B) + ^ + ( ^ + * - - ]T P g p u g css (^|i?e = 



s? d A ■ F P *(A\B) 



d A 

n — 1 
d A 



9=n+l 



(A7) 



and this proves (10). The tightness of the bounds in (10) and (11) follows by construction. In the region F pg (A\B) ^ 
l/d A , the upper bound is achieved by a bipartite pure state whose Schmidt basis is one of the bases appearing in 
the sum of guessing probabilities under consideration, and the lower bound is achieved by a bipartite pure state whose 
Schmidt basis is one of the bases that belongs to the same complete MUB set as the bases under consideration, 
but whose guessing probability was removed from the sum under consideration. In the region F pg (A\B) ^ l/d A , the 
upper bound is achieved by a tensor product state p A ® pb such that p A is diagonal in one of the bases appearing 
in the sum of guessing probabilities under consideration, and the lower bound is similarly achieved by such a tensor 
product state where p A is diagonal in one of the O bases that belongs to the same complete MUB set as the bases 
under consideration, but whose guessing probability was removed from the sum under consideration. 



Appendix B: Entanglement witnessing 



Here we show the origin of (13), our condition for witnessing entanglement. We will make use of the following 
lemma, which says that separable states cannot have a negative conditional entropy. 
Lemma 2. Let p A s = J2j Pj ' Pa® Pb be a separable state. Then, we have that 

H 2 (A\B) ^ H min {A\B) > . (Bl) 



Proof. The inequality H2(A\B) ^ H m i n (A\B) holds in general for any state p A B since A^_^ A , in (17) is a particular 



CPTP map and -ff m i n involves an optimization over all CPTP maps Ab-> A ' m (15). 

To prove H m i n (A\B) ^ in the case of separable p A B, note that any local operation on a separable state results in 
another separable state. Suppose cr AA > = (X A <8> Ab->-a'){pab) is the separable state that achieves the optimization 



when evaluating H m - ln (A\B) for p A B (i.e., A is the optimal channel in (15)). Then, we have that 



F(A\B) = F($ AA , ) a AA ,) 

sc F (<f> AA , , 1 A ® a a>) = l/d A , (B2) 

which follows because the fidelity increases upon increasing one of its arguments, and because for separable a AA i we 
have a AA < < t A ® a A > with a A > = Tr A (a AA /). Using H m i n (A\B) = —log[d A F(A\B)}, the desired result follows. □ 

The following lemma essentially proves our entanglement witnessing condition. 
Lemma 3. Let p A s — Ylj Pj ' P A ® Pb be a separable state. Let {Kg}g =1 be a subset (of size n) of a complete set of 
MUBs on A, and let {Lg}g =1 be an arbitrary set of n orthonormal bases on B. Then, for the state p A s we have 

n _ 
y^ 2 -H,{K t \L 9 ) ^ 1 + -—L , (B3) 

9=1 dA 

where the classical joint probability distribution needed to evaluate H2{Kg\Lg) is obtained by decohering the state 
p AB in the Kg = {\Kg tP )} basis on A and the Lg = {\L 6 , q )} basis on B, i.e., p Ka L e = J2 p , q (\ K o,p)(Kg, p \ ® 
\Le,q)(Le, q \)pAB(\Kd >p )(Kg^\ ® \Lg. q )(L g , q \). 
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Proof. The previous lemma indicates that F PS (A\B) ^ 1/oIa since pab is separable. Combining this with the bound 
in (11) we have 

n n n 

n — + 1 > (n-l)-F**{A\B) + 1 > J2 P iucss(Ke\B) = Y, 2 ~ H2{I<elB) ^^-"^^ > ( B4 ) 

A 61=1 8=1 8=1 

where the last inequality follows because i?2 satisfies the data-processing inequality [35] > that is, decohering B in some 
basis cannot reduce the uncertainty as measured by H 2 . □ 



Since separable states must satisfy (|B3|), it follows that if Alice and Bob can show that 

i - 1 
d A 



y 2 -H 2 (K e \ Le ) > 1 + ( B5) 

^— — * ft A 



then their state is non-separable, i.e., entangled. 



Appendix C: More general entropies 



Our main result |5]) is in terms of the conditional Renyi 2-entropy. However, we can also prove it in terms of a 
more general continuous family of conditional 2-entropies. For v £ [0, 1] and bipartite quantum states pab, we define 



H 2>V {A\B) = - logTr \p\ B vPAB , v 



(CI) 



where p A B,v : = i^A ® P~b )pab(^a ® p B " )■ It is easily seen that v — corresponds to the usual defini- 

tion ( 16 1 in the main text. We state the generalization of our uncertainty equality (|5| for a full set of MUBs, but 
note that it also holds for all other "informationally equivalent" measurements (cf. Appendix |F|) . 
Corollary 4. Let {0}eee be a complete set of MUBs on some Hilbert space n A , and denote = {\6k)} d k ± v Then, 
we have for any bipartite quantum state pab that 



H 2iV (K\BG) = log(d A + 1) - log (2 



,-i? 2 ,„(A|B) 



(C2) 

where p KB e = jX+i Ee,fc(I^X^fcl ® ^B)pA B {\0 k ){0k\ ® Is) <S> |6>)(6>| e . 

The proof is obvious by just taking the proof for the conditional Renyi 2-entropy (29), and replacing pab with 
Pab,v It is worth noting that (C2) applies (in addition to the H 2 entropy considered in the main text) to a variant, 



H' 2 (A\B) = H 2A (A\B) = - logTr [p AB {t A ® Pg 1 )] 



(C3) 



that is, the entropy obtained from setting v = 1 in (CI). The conditional entropy H' 2 is mathematically useful (see 
e.g. 36, 37J), and is approximately equivalent to the smooth conditional min-entropy (see below). 



Appendix D: Quantum cryptography 

Here we show the uncertainty and certainty relations ^ and ^ in terms of the smooth conditional min-entropy 
as stated in the main text. For that, we first need to precisely define the smooth conditional min-entropy. For a 
bipartite quantum state pab and smoothing parameter e > 0, it is defined as 

H^ a (A\B) p = su P H mia (A\B)p , (Dl) 

PAB 

where the supremum is over all sub- normalised states pab on AB that are e-close to pab in purified distance [17j . 
Now, the crucial point is that H^ ln and H' 2 are equivalent in the following sense: it holds for any bipartite quantum 
state pab and e > that [T7] 

H min (A\B) p H' 2 {A\B) P < H^ in (A\B) p + log (h . (D2) 
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Also, consider the extension of our main result (Corollary [4]) evaluated for the case v = 1, 

H 2 (K\BQ) =log(d A + l) - log (2- B *W B ) +l\ . (D3) 



By combining (|D2| with ( D3 1 , we obtain the uncertainty and certainty relation for the smooth conditional min-entropy 
as given in |8| and Q. We note that similar uncertainty relations have been derived in |16j . and were used to analyze 
security in the noisy storage model |33| . 



Appendix E: Monogamy of correlations 



Here we show (14) from the main text. The precise statement is as follows. 
Corollary 5. Let {0}eee be a complete set of MUBs on some Hilbert space U A , and denote 9 = {\O k )} d k ti- Then, 
we have for any tripartite pure quantum state pabe that 



D ( P ae\\j^ ® Pe) = \ogd A - log ({d A + 1) • 2- ff ^l se ) - l) , 



where H' 2 (K\BQ) = H 2A (K\BQ) is defined in Q, and D (p AE \\^ ® p E ) = -log Ir- 
relative Renyi 0-entropy. 



Pae(^®Pe) 



Proof. First, let us rewrite (D3l as 



H' 2 {A\B) = - log ((d A + 1) • 2-^( K l se > - 1 



(El) 
denotes the 

(E2) 



Now, for any conditional entropy that is invariant under local isometries on the conditioning system, one can define 
a so-called dual entropy. For some generic entropy Hx, the dual entropy if^- ual is defined by 



H K (A\B) = -Hfr\A\E) p , 



(E3) 



where E is a system that purifies p AE - Since H' 2 {A\B) is invariant under local isometries on B, the dual entropy is 
well defined, and it is known that |36j 



-H. 



/dual 



(A\E) = D {p AE \\t A ®p E ) 



By the standard rewriting 



the claim follows. 



D (p AE \\t A ® p E ) = D (p AE \\l/d A ® p E ) - logdA , 



(E4) 

(E5) 

□ 



Appendix F: Main result - revisited 

We have seen in the Methods section (Section III) that the proof of our uncertainty equality ([5| crucially relies 
on the fact that a full set of MUBs generates a complex projective 2-design )34j . In general, a complex projective 
2-design is a set {\tpy)}ye.Y (of size \Y\) of vectors \ip y ) lying in a Hilbert space T-L A such that 

W\ ' E = dI^TT)^' +F ^ ' (F1) 

where F AA i denotes the swap operator, and A' a copy of A. It turns out that there are other "informationally 
equivalent" measurements that generate a complex projective 2-design. 

As an example we mention symmetric informationally complete positive operator valued measures (SIC-POVMs), 
such as the four states forming a tetrahedron on the Bloch sphere for qubits. 

Corollary 6. Let ■ \^ k ){^k\} k ti be a SIC-POVM on some Hilbert space H A . Then, we have for any bipartite 
quantum state p AE that 

H 2 (K\B) = log[d A (d A + 1)] - log (2- H ^ A ^ + l) , (F2) 



where pkb — 2jt=i \k){k\ ® Tr^[(^ • \ip k )(ip k \ ® 1)/9ab] is a classical-quantum state with {\k)} an orthonormal basis 
on Hk- 
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Notice that the (^-dependent term on the r.h.s. of (F2 1 is slightly different from the corresponding term appearing 
m our mam result and indeed |F2} implies that logd^ H 2 {K\B) ^ 21ogeU for SIC-POVMs. Nevertheless, the 
proof of (F2) is identical to the proof of ([5]), with the appropriate version of (Fl) substituted into the proof (29 1. 

In addition, so-called unitary 2-designs are very related to complex projective 2-designs. A set {U y } y& Y (or size 
\Y\) of unitaries U y on some Hilbert space ~Ha forms a unitary two-design if 



' ^{U y ®Ul) m =( (U®U^f 2 dU, (F3) 

JU(d A ) 



\Y\ ^ 

1 1 yev 



where the integration is over all unitaries with respect to the Haar measure. Examples of unitary two-designs are 
the full unitary group, or the Clifford group for qubit systems. In fact, unitary 2-dcsigns generate complex projective 
2-designs. 

Lemma 7. [35] Let {Ug}e^e be a unitary two-design on some Hilbert space Ha- Then, we have 

^ •££(wm t r = lz ^ ITr) (i^ + F AA , ) , ( F4) 

A 1 1 k=ieee A K ' 

where {\k)} denotes some orthonormal basis of %a- 

Hence, our main result also holds for unitary two-designs. 
Corollary 8. Let {Ug}g^Q be a unitary two-design on some Hilbert space %a- Then, we have for any bipartite 
quantum state pab that 

H 2 {K\BQ) = \og{d A + 1) - log (V^I B > + l) , (F5) 

where 

Pkbb = |4 £(| Wfc| ® t B )PAB{\O k )(e k \ ® l s ) ® \9)(9\ e , (F6) 
' ' e,k 



and \9k) = Ug\k) for some orthonormal basis {\k)} oH-La- 



